CVE-2007-2447

CVE-2007-2447 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2007-2447 python3 smb3.0.20.py -lh localhost -lp local port -t target Error The error you're encountering indicates that the Python script is trying to import a module named smb, but it is not installed on your system. The smb module is part of the pysmb...

CIFSwitch-Checker-CVE-2026-46243

CIFSwitch Checker - CVE-2026-46243 Checker for Linux to identify configurations potentially vulnerable to the CIFSwitch vulnerability CVE-2026-46243. It does not exploit the vulnerability or modify the system. The main goal is to help identify potentially affected systems and validate mitigations...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Linux Kernel Local Privilege Escalation LPE Local Privilege Escalation vulnerability affecting the Linux Kernel CIFS/SMB client. 📖 Overview CVE-2026-46243 is a Local Privilege Escalation LPE vulnerability within the Linux Kernel's CIFS/SMB client. Improper validation ...

MiracleLinux 9 : kernel-5.14.0-687.57.1.el9_8 (AXSA:2026-2305:123)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2305:123 advisory. kernel: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise CVE-2026-46309 kernel: macsec: fix replay protection at XPN lower-PN...

CVE-2002-0991

CVE-2002-0991 Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier Exploit-db publication at https://www.exploit-db.com/exploits/21577/ Packetstorm publication at https://packetstormsecurity.com/files/26303/cifslogin.txt.html SecurityFocus publication at...

kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

A flaw was found in the Linux kernel's Server Message Block SMB client. When a file with the setuid or setgid bit is written to on certain Common Internet File System CIFS mounts specifically those using 'cifsacl', 'modefromsid' options, or SMB3.1.1 POSIX extensions, the kernel fails to properly...

kernel: smb: client: reject a tree connect response whose byte count is too small

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an integer underflow, causing the client to read beyond an allocated...

kernel: smb: client: reject a tree connect response whose byte count is too small

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an integer underflow, causing the client to read beyond an allocated...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151173 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: fix lofft underflow in cifsremapfilerange when len == 0 With len == 0 clone to EOF, the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151137 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon bounds its...

SUSE-SU-2026:24651-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path bsc1264022. - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in...

SUSE-SU-2026:24662-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path bsc1264022. - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in...

SUSE-SU-2026:24648-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path bsc1264022. - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets CVE-2026-72318 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use CVE-2026-74752 In the Linux kernel, the...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-138)

The version of kernel installed on the remote host is prior to 5.10.272-274.1151. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-138 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string...

CVE-2026-99275

A flaw was found in the Linux kernel's SMB Server Message Block client. A malicious SMB server can exploit this vulnerability to trigger an out-of-bounds memory read, leading to sensitive information disclosure. Due to missing packet length checks on truncated session setup responses, the client...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: smb: Client: Fixed the issue where a busy dentry warning would occur after unmount after DIO. The commit c68337442f03 “cifs: Fixed the issue where deferred dentry references were not released after unmount” addressed the issue...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cifs: Fixed an issue where credits were not updated upon failure in cifsissueread. Fixed an issue where the credits value was not updated during a failed execution of cifsissueread, so that retrying the subreq would not...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key-datalen, which is limited to U16MAX. Accepting a larger key payload truncates the recorded length and can cause subsequent users to...